@knowzai/cli 0.4.0 → 0.5.1

package/dist/lib/selfhosted-keyring.js

@@ -0,0 +1,193 @@
+import { existsSync, lstatSync, readdirSync, rmSync, } from 'node:fs';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+import { KnowzError, ExitCode, createPrivateTempDirectory, ensurePrivateDirectory, protectPrivatePath } from '@knowzai/core';
+import { validateProjectName, } from './platform-runtime.js';
+import { assertLocalEngineContext } from './local-engine-context.js';
+import { withAnonymousRegistry } from './anonymous-registry.js';
+/** Run after public API image acquisition and before first API startup, including fresh runtimes. */
+export async function prepareSelfHostedKeyringVolume(input) {
+    validateProjectName(input.name);
+    if (!input.image || input.image.startsWith('-') || /\s/.test(input.image))
+        throw new KnowzError('A local API image is required to initialize the keyring.', ExitCode.Usage);
+    const engine = await assertLocalEngineContext(input.engine, { runner: input.runner });
+    const project = `knowz-selfhosted-${input.name}`;
+    const volume = `${project}_knowz-protected-keys`;
+    const options = {
+        cwd: existsSync(input.paths.runtimeDir) ? input.paths.runtimeDir : process.cwd(),
+        shell: false,
+        env: engine.composeFront?.env,
+    };
+    for (const args of [
+        [
+            'volume',
+            'create',
+            '--label',
+            `com.docker.compose.project=${project}`,
+            '--label',
+            'com.docker.compose.volume=knowz-protected-keys',
+            volume,
+        ],
+        [
+            'run',
+            '--rm',
+            '--pull',
+            'never',
+            '--user',
+            '0:0',
+            '--entrypoint',
+            'sh',
+            '-v',
+            `${volume}:/keys`,
+            input.image,
+            '-c',
+            'chown 1654:1654 /keys && chmod 700 /keys',
+        ],
+    ]) {
+        const result = await input.runner(engine.engine, args, options);
+        if (result.status !== 0 || result.error)
+            throw new KnowzError('Cannot initialize the private keyring using the local API image. Keep the existing runtime and retry after checking its engine and image.', ExitCode.Usage);
+    }
+}
+/** Call while writers are stopped and before replacing the old API container. Secret bytes never enter process output. */
+export async function preserveLegacySelfHostedKeyring(input) {
+    validateProjectName(input.name);
+    const engine = await assertLocalEngineContext(input.engine, { runner: input.runner });
+    const front = engine.composeFront;
+    const project = `knowz-selfhosted-${input.name}`;
+    const volume = `${project}_knowz-protected-keys`;
+    const options = {
+        cwd: existsSync(input.paths.runtimeDir) ? input.paths.runtimeDir : process.cwd(),
+        shell: false,
+        env: front.env,
+    };
+    const invoke = (args) => args[0] === 'run' && args.includes('alpine:3.21')
+        ? withAnonymousRegistry(options.env, async (env) => input.runner(engine.engine, args, { ...options, env }))
+        : input.runner(engine.engine, args, options);
+    const listed = await input.runner(front.command, [
+        ...front.baseArgs,
+        '--project-name',
+        project,
+        '--file',
+        input.paths.composeFile,
+        '--env-file',
+        input.paths.envFile,
+        'ps',
+        '--all',
+        '--quiet',
+        'api',
+    ], options);
+    if (listed.status !== 0 || listed.error)
+        throw new KnowzError('Cannot inspect the existing API before keyring migration. Keep its container and retry.', ExitCode.Usage);
+    const ids = (listed.stdout ?? '').trim().split(/\s+/).filter(Boolean);
+    if (!ids.length)
+        return { migrated: false, keys: 0, reason: 'No existing API container' };
+    if (ids.length !== 1 || !/^[a-f0-9]{12,64}$/.test(ids[0]))
+        throw new KnowzError('Existing API container identity is ambiguous; keyring migration refused.', ExitCode.Usage);
+    const id = ids[0];
+    const inspected = await invoke(['inspect', id, '--format', '{{json .Mounts}}']);
+    let mounts;
+    try {
+        if (inspected.status !== 0 || inspected.error)
+            throw new Error();
+        mounts = JSON.parse(inspected.stdout ?? '');
+        if (!Array.isArray(mounts))
+            throw new Error();
+    }
+    catch {
+        throw new KnowzError('Cannot verify the API keyring mount. Keep its container and retry.', ExitCode.Usage);
+    }
+    const existing = mounts.find((m) => m.Destination === '/data/keys');
+    if (existing) {
+        if (existing.Name !== volume)
+            throw new KnowzError('API keyring uses a different storage mount. Back it up explicitly before replacing this runtime.', ExitCode.Usage);
+        // Older published APIs ignore DataProtection__KeysPath even when new Compose mounts
+        // /data/keys. Inspect and merge legacy keys before treating that mount as sufficient.
+    }
+    const running = await invoke(['inspect', id, '--format', '{{json .State.Running}}']);
+    if (running.status !== 0 ||
+        running.error ||
+        !['true', 'false'].includes((running.stdout ?? '').trim()))
+        throw new KnowzError('Cannot verify legacy API running state before migration.', ExitCode.Usage);
+    const paused = running.stdout?.trim() === 'true';
+    const stage = createPrivateTempDirectory(tmpdir(), 'knowz-keyring-');
+    const keys = join(stage, 'keys');
+    ensurePrivateDirectory(keys);
+    try {
+        if (paused) {
+            const stopped = await invoke(['stop', id]);
+            if (stopped.status !== 0 || stopped.error)
+                throw new KnowzError('Cannot pause the legacy API safely; migration refused.', ExitCode.Usage);
+        }
+        let copied = false;
+        for (const path of [
+            '/home/app/.aspnet/DataProtection-Keys/.',
+            '/root/.aspnet/DataProtection-Keys/.',
+        ]) {
+            const result = await invoke(['cp', `${id}:${path}`, keys]);
+            if (result.status === 0 && !result.error) {
+                copied = true;
+                break;
+            }
+            if (!/could not find|no such file|does not exist|not found in container/i.test(result.stderr ?? ''))
+                throw new KnowzError('Legacy keyring copy failed. Keep the existing API container; resolve its access/engine error before retrying migration.', ExitCode.Usage);
+        }
+        if (!copied)
+            return {
+                migrated: false,
+                keys: 0,
+                reason: 'Legacy keyring not created; preserve any separately managed keys before replacement',
+            };
+        const files = readdirSync(keys);
+        if (files.length > 10000)
+            throw new KnowzError('Legacy keyring exceeds supported file count; manual recovery required.', ExitCode.Usage);
+        for (const file of files) {
+            const path = join(keys, file);
+            const stat = lstatSync(path);
+            if (!/^(?:key|revocation)-[A-Za-z0-9.-]+\.xml$/.test(file) ||
+                !stat.isFile() ||
+                stat.isSymbolicLink() ||
+                stat.size > 1024 * 1024)
+                throw new KnowzError('Legacy keyring contains unexpected files; manual review required before migration.', ExitCode.Usage);
+            protectPrivatePath(path);
+        }
+        if (!files.length)
+            return { migrated: false, keys: 0, reason: 'Legacy keyring is empty' };
+        const created = await invoke([
+            'volume',
+            'create',
+            '--label',
+            `com.docker.compose.project=${project}`,
+            '--label',
+            'com.docker.compose.volume=knowz-protected-keys',
+            volume,
+        ]);
+        if (created.status !== 0 || created.error)
+            throw new KnowzError('Cannot prepare the named keyring volume. Existing keys remain in the API container.', ExitCode.Usage);
+        const script = 'set -eu; for f in /legacy/*.xml; do dst="/keys/${f##*/}"; if [ -e "$dst" ] && ! cmp -s "$f" "$dst"; then echo "Conflicting existing keyring file; migration refused" >&2; exit 1; fi; done; for f in /legacy/*.xml; do dst="/keys/${f##*/}"; if [ ! -e "$dst" ]; then cp "$f" "$dst"; fi; chmod 600 "$dst"; chown 1654:1654 "$dst"; done; chown 1654:1654 /keys; chmod 700 /keys';
+        const merged = await invoke([
+            'run',
+            '--rm',
+            '-v',
+            `${volume}:/keys`,
+            '-v',
+            `${keys}:/legacy:ro`,
+            'alpine:3.21',
+            'sh',
+            '-c',
+            script,
+        ]);
+        if (merged.status !== 0 || merged.error)
+            throw new KnowzError('Keyring migration failed or an existing key conflicts. Keep the original API container and resolve the named volume before retrying.', ExitCode.Usage);
+        return { migrated: true, keys: files.length };
+    }
+    finally {
+        rmSync(stage, { recursive: true, force: true });
+        if (paused) {
+            const resumed = await invoke(['start', id]);
+            if (resumed.status !== 0 || resumed.error)
+                throw new KnowzError('Keyring migration left the original API container stopped; start the existing container and retry before replacing it.', ExitCode.Usage);
+        }
+    }
+}
+//# sourceMappingURL=selfhosted-keyring.js.map

package/dist/lib/selfhosted-keyring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"selfhosted-keyring.js","sourceRoot":"","sources":["../../src/lib/selfhosted-keyring.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,SAAS,EACT,WAAW,EACX,MAAM,GACP,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,0BAA0B,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAE7H,OAAO,EACL,mBAAmB,GAIpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAOhE,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,KAA6C;IAE7C,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QACvE,MAAM,IAAI,UAAU,CAClB,0DAA0D,EAC1D,QAAQ,CAAC,KAAK,CACf,CAAC;IACJ,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,oBAAoB,KAAK,CAAC,IAAI,EAAE,CAAC;IACjD,MAAM,MAAM,GAAG,GAAG,OAAO,uBAAuB,CAAC;IACjD,MAAM,OAAO,GAAG;QACd,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;QAChF,KAAK,EAAE,KAAc;QACrB,GAAG,EAAE,MAAM,CAAC,YAAY,EAAE,GAAG;KAC9B,CAAC;IACF,KAAK,MAAM,IAAI,IAAI;QACjB;YACE,QAAQ;YACR,QAAQ;YACR,SAAS;YACT,8BAA8B,OAAO,EAAE;YACvC,SAAS;YACT,gDAAgD;YAChD,MAAM;SACP;QACD;YACE,KAAK;YACL,MAAM;YACN,QAAQ;YACR,OAAO;YACP,QAAQ;YACR,KAAK;YACL,cAAc;YACd,IAAI;YACJ,IAAI;YACJ,GAAG,MAAM,QAAQ;YACjB,KAAK,CAAC,KAAK;YACX,IAAI;YACJ,0CAA0C;SAC3C;KACF,EAAE,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAChE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK;YACrC,MAAM,IAAI,UAAU,CAClB,2IAA2I,EAC3I,QAAQ,CAAC,KAAK,CACf,CAAC;IACN,CAAC;AACH,CAAC;AACD,0HAA0H;AAC1H,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,KAAyB;IAEzB,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,MAAM,KAAK,GAAG,MAAM,CAAC,YAAa,CAAC;IACnC,MAAM,OAAO,GAAG,oBAAoB,KAAK,CAAC,IAAI,EAAE,CAAC;IACjD,MAAM,MAAM,GAAG,GAAG,OAAO,uBAAuB,CAAC;IACjD,MAAM,OAAO,GAAG;QACd,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE;QAChF,KAAK,EAAE,KAAc;QACrB,GAAG,EAAE,KAAK,CAAC,GAAG;KACf,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,IAAc,EAAE,EAAE,CAChC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC/C,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAC/C,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,CAAC,CACvD;QACH,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAC/B,KAAK,CAAC,OAAO,EACb;QACE,GAAG,KAAK,CAAC,QAAQ;QACjB,gBAAgB;QAChB,OAAO;QACP,QAAQ;QACR,KAAK,CAAC,KAAK,CAAC,WAAW;QACvB,YAAY;QACZ,KAAK,CAAC,KAAK,CAAC,OAAO;QACnB,IAAI;QACJ,OAAO;QACP,SAAS;QACT,KAAK;KACN,EACD,OAAO,CACR,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK;QACrC,MAAM,IAAI,UAAU,CAClB,yFAAyF,EACzF,QAAQ,CAAC,KAAK,CACf,CAAC;IACJ,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtE,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAC1F,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;QACxD,MAAM,IAAI,UAAU,CAClB,0EAA0E,EAC1E,QAAQ,CAAC,KAAK,CACf,CAAC;IACJ,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC;IACnB,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAChF,IAAI,MAAsD,CAAC;IAC3D,IAAI,CAAC;QACH,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QACjE,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAkB,CAAC;QAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAClB,oEAAoE,EACpE,QAAQ,CAAC,KAAK,CACf,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,YAAY,CAAC,CAAC;IACpE,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM;YAC1B,MAAM,IAAI,UAAU,CAClB,kGAAkG,EAClG,QAAQ,CAAC,KAAK,CACf,CAAC;QACJ,oFAAoF;QACpF,sFAAsF;IACxF,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACrF,IACE,OAAO,CAAC,MAAM,KAAK,CAAC;QACpB,OAAO,CAAC,KAAK;QACb,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAE1D,MAAM,IAAI,UAAU,CAClB,0DAA0D,EAC1D,QAAQ,CAAC,KAAK,CACf,CAAC;IACJ,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,MAAM,CAAC;IACjD,MAAM,KAAK,GAAG,0BAA0B,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACjC,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC;QACH,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;YAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK;gBACvC,MAAM,IAAI,UAAU,CAClB,wDAAwD,EACxD,QAAQ,CAAC,KAAK,CACf,CAAC;QACN,CAAC;QACD,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI;YACjB,yCAAyC;YACzC,qCAAqC;SACtC,EAAE,CAAC;YACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;YAC3D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACzC,MAAM,GAAG,IAAI,CAAC;gBACd,MAAM;YACR,CAAC;YACD,IACE,CAAC,oEAAoE,CAAC,IAAI,CACxE,MAAM,CAAC,MAAM,IAAI,EAAE,CACpB;gBAED,MAAM,IAAI,UAAU,CAClB,yHAAyH,EACzH,QAAQ,CAAC,KAAK,CACf,CAAC;QACN,CAAC;QACD,IAAI,CAAC,MAAM;YACT,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,IAAI,EAAE,CAAC;gBACP,MAAM,EACJ,qFAAqF;aACxF,CAAC;QACJ,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK;YACtB,MAAM,IAAI,UAAU,CAClB,wEAAwE,EACxE,QAAQ,CAAC,KAAK,CACf,CAAC;QACJ,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC7B,IACE,CAAC,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC;gBACtD,CAAC,IAAI,CAAC,MAAM,EAAE;gBACd,IAAI,CAAC,cAAc,EAAE;gBACrB,IAAI,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI;gBAEvB,MAAM,IAAI,UAAU,CAClB,oFAAoF,EACpF,QAAQ,CAAC,KAAK,CACf,CAAC;YACJ,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;QAC1F,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC;YAC3B,QAAQ;YACR,QAAQ;YACR,SAAS;YACT,8BAA8B,OAAO,EAAE;YACvC,SAAS;YACT,gDAAgD;YAChD,MAAM;SACP,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK;YACvC,MAAM,IAAI,UAAU,CAClB,qFAAqF,EACrF,QAAQ,CAAC,KAAK,CACf,CAAC;QACJ,MAAM,MAAM,GACV,kXAAkX,CAAC;QACrX,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC;YAC1B,KAAK;YACL,MAAM;YACN,IAAI;YACJ,GAAG,MAAM,QAAQ;YACjB,IAAI;YACJ,GAAG,IAAI,aAAa;YACpB,aAAa;YACb,IAAI;YACJ,IAAI;YACJ,MAAM;SACP,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK;YACrC,MAAM,IAAI,UAAU,CAClB,sIAAsI,EACtI,QAAQ,CAAC,KAAK,CACf,CAAC;QACJ,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;YAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK;gBACvC,MAAM,IAAI,UAAU,CAClB,wHAAwH,EACxH,QAAQ,CAAC,KAAK,CACf,CAAC;QACN,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/lib/selfhosted-lifecycle.d.ts

@@ -1,6 +1,7 @@
-import { type PlatformState, type ProcessRunner, type OpenAiCompatibleProviderOptions } from './platform-runtime.js';
+import { type PlatformState, type ProcessRunner, type AsyncProcessRunner, type ProcessResult, type AzureProviderOptions, type OpenAiCompatibleProviderOptions } from './platform-runtime.js';
+import { type EngineStatus } from './container-engine.js';
 import type { PlatformCommandResult } from './platform-lifecycle.js';
-export declare const STABLE_SELFHOSTED_RELEASE = "0.16.0";
+export declare const STABLE_SELFHOSTED_RELEASE = "0.17.0";
 export declare const SELFHOSTED_SECRET_KEYS: readonly ["POSTGRES_PASSWORD", "SA_PASSWORD", "JWT_SECRET", "ADMIN_PASSWORD", "MCP_SERVICE_KEY"];
 export interface SelfHostedPaths {
     root: string;
@@ -23,6 +24,7 @@ export interface SelfHostedPlan {
 export interface SelfHostedReleaseContract {
     version: string;
     status: 'complete';
+    digests?: Partial<Record<'api' | 'web' | 'mcp', string>>;
     runtime: {
         database: 'postgres' | 'mssql';
         composeAsset: string;
@@ -30,6 +32,8 @@ export interface SelfHostedReleaseContract {
     };
 }
 export interface SelfHostedState {
+    schemaVersion?: 2;
+    healthPassed?: boolean;
     edition: 'selfhosted';
     name: string;
     version: string;
@@ -38,6 +42,15 @@ export interface SelfHostedState {
         web: number;
         mcp: number;
     };
+    provider?: PlatformState['provider'];
+    components?: {
+        mcp: boolean;
+        publicSite: false;
+    };
+    engine?: EngineStatus;
+    updatedAt?: string;
+    database?: 'postgres' | 'mssql';
+    images?: Partial<Record<'api' | 'web' | 'mcp', string>>;
 }
 export declare function resolveSelfHostedPaths(name: string, configDir?: string): SelfHostedPaths;
 export declare function resolvePackagedSelfHostedAssetsDir(): string;
@@ -57,9 +70,10 @@ export declare function planSelfHostedDown(name: string, configDir?: string, eng
     args: string[];
     paths: SelfHostedPaths;
 };
-export declare function planSelfHostedComposeInvocations(plan: SelfHostedPlan, engine?: string): Array<{
+export declare function planSelfHostedComposeInvocations(plan: SelfHostedPlan, engine?: string | EngineStatus): Array<{
     command: string;
     args: string[];
+    env?: Record<string, string>;
 }>;
 export interface ApplySelfHostedInput {
     name: string;
@@ -72,6 +86,14 @@ export interface ApplySelfHostedInput {
     };
     openAiCompatible?: OpenAiCompatibleProviderOptions;
     adminPassword?: string;
+    provider?: PlatformState['provider'];
+    disableAI?: boolean;
+    providerSettingsExplicit?: boolean;
+    azure?: AzureProviderOptions;
+    components?: {
+        mcp?: boolean;
+        publicSite?: boolean;
+    };
 }
 export interface ApplySelfHostedDeps {
     runner?: ProcessRunner;
@@ -81,16 +103,32 @@ export interface ApplySelfHostedDeps {
     writeFile?: (path: string, contents: string, mode?: number) => void;
     mkdir?: (path: string) => void;
     exists?: (path: string) => boolean;
-    engine?: string;
+    engine?: string | EngineStatus;
 }
-export declare function applySelfHosted(input: ApplySelfHostedInput, deps?: ApplySelfHostedDeps): {
+declare function prepareSelfHosted(input: ApplySelfHostedInput, deps?: ApplySelfHostedDeps): {
     plan: SelfHostedPlan;
     env: Record<string, string>;
     state: SelfHostedState;
-    invocations: Array<{
+    invocations: {
         command: string;
         args: string[];
-    }>;
+        env?: Record<string, string>;
+    }[];
+    commit: () => void;
+    recordAttempt: (status: "running" | "ready" | "failed" | "canceled", phase?: string) => void;
 };
+export type SelfHostedApplication = Pick<ReturnType<typeof prepareSelfHosted>, 'plan' | 'env' | 'state' | 'invocations'> & {
+    processResults: ProcessResult[];
+};
+/** Synchronous compatibility entry point for embedders. Without a runner it only prepares files. */
+export declare function applySelfHosted(input: ApplySelfHostedInput, deps?: ApplySelfHostedDeps): SelfHostedApplication;
+export interface AsyncSelfHostedDeps extends Omit<ApplySelfHostedDeps, 'runner'> {
+    runner?: ProcessRunner | AsyncProcessRunner;
+    signal?: AbortSignal;
+    waitUntilReady?: (apiUrl: string, signal?: AbortSignal) => Promise<boolean>;
+    progress?: (message: string) => void;
+}
+export declare function applySelfHostedAsync(input: ApplySelfHostedInput, deps?: AsyncSelfHostedDeps): Promise<SelfHostedApplication>;
 export declare function selfHostedToPlatformResult(applied: ReturnType<typeof applySelfHosted>, provider: PlatformState['provider'], now?: () => Date): PlatformCommandResult;
+export {};
 //# sourceMappingURL=selfhosted-lifecycle.d.ts.map

package/dist/lib/selfhosted-lifecycle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"selfhosted-lifecycle.d.ts","sourceRoot":"","sources":["../../src/lib/selfhosted-lifecycle.ts"],"names":[],"mappings":"AAKA,OAAO,EAIL,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,+BAA+B,EACrC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAErE,eAAO,MAAM,yBAAyB,WAAW,CAAC;AAClD,eAAO,MAAM,sBAAsB,kGAMzB,CAAC;AASX,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,KAAK,EAAE,eAAe,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CAClD;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE;QACP,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAC;QAC/B,YAAY,EAAE,MAAM,CAAC;QACrB,yBAAyB,CAAC,EAAE,MAAM,CAAC;KACpC,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,YAAY,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CAClD;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,eAAe,CAQxF;AAED,wBAAgB,kCAAkC,IAAI,MAAM,CAE3D;AAED,wBAAgB,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAKpE;AASD,wBAAgB,gCAAgC,CAC9C,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,GACd,yBAAyB,CAsC3B;AAUD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAIzD;AAED,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,OAAO,CAAC,EAC/C,WAAW,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM,EAClD,WAAW,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,UAA8B,EAC7D,gBAAgB,CAAC,EAAE,+BAA+B,EAClD,aAAa,CAAC,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,yBAAyB,GAC1C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA2DxB;AAUD,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,EACnB,QAAQ,GAAE,UAAU,GAAG,OAAoB,GAC1C,IAAI,CA6BN;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAoB,GAC7C,OAAO,CAET;AAED,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,SAAW,GAChB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,CAgB7D;AAED,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,cAAc,EACpB,MAAM,SAAW,GAChB,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAe5C;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,gBAAgB,CAAC,EAAE,+BAA+B,CAAC;IACnD,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,UAAU,CAAC;IAC3C,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACpC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACpE,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAQD,wBAAgB,eAAe,CAC7B,KAAK,EAAE,oBAAoB,EAC3B,IAAI,GAAE,mBAAwB,GAC7B;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,KAAK,EAAE,eAAe,CAAC;IAAC,WAAW,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;CAAE,CA8DxI;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,EAC3C,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC,EACnC,GAAG,GAAE,MAAM,IAAuB,GACjC,qBAAqB,CAiCvB"}
+{"version":3,"file":"selfhosted-lifecycle.d.ts","sourceRoot":"","sources":["../../src/lib/selfhosted-lifecycle.ts"],"names":[],"mappings":"AAOA,OAAO,EAIL,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,oBAAoB,EAKzB,KAAK,+BAA+B,EACrC,MAAM,uBAAuB,CAAC;AAI/B,OAAO,EAA6C,KAAK,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErG,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAErE,eAAO,MAAM,yBAAyB,WAAW,CAAC;AAClD,eAAO,MAAM,sBAAsB,kGAMzB,CAAC;AASX,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,gBAAgB,CAAC;IAC9B,KAAK,EAAE,eAAe,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CAClD;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,KAAK,GAAG,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,OAAO,EAAE;QACP,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAC;QAC/B,YAAY,EAAE,MAAM,CAAC;QACrB,yBAAyB,CAAC,EAAE,MAAM,CAAC;KACpC,CAAC;CACH;AAED,MAAM,WAAW,eAAe;IAC9B,aAAa,CAAC,EAAE,CAAC,CAAC;IAClB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,OAAO,EAAE,YAAY,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,QAAQ,CAAC,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IACrC,UAAU,CAAC,EAAE;QAAE,GAAG,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,KAAK,CAAA;KAAE,CAAC;IACjD,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC;IAChC,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,GAAG,KAAK,GAAG,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;CACzD;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,eAAe,CASxF;AAED,wBAAgB,kCAAkC,IAAI,MAAM,CAE3D;AAED,wBAAgB,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAKpE;AASD,wBAAgB,gCAAgC,CAC9C,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,GACd,yBAAyB,CAwC3B;AAUD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAIzD;AAED,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,OAAO,CAAC,EAC/C,WAAW,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM,EAClD,WAAW,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,UAA8B,EAC7D,gBAAgB,CAAC,EAAE,+BAA+B,EAClD,aAAa,CAAC,EAAE,MAAM,EACtB,eAAe,CAAC,EAAE,yBAAyB,GAC1C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA2DxB;AAUD,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,EACnB,QAAQ,GAAE,UAAU,GAAG,OAAoB,GAC1C,IAAI,CA6BN;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAoB,GAC7C,OAAO,CAET;AAED,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,EAClB,MAAM,SAAW,GAChB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,CAgB7D;AAED,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,cAAc,EACpB,MAAM,GAAE,MAAM,GAAG,YAAuB,GACvC,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAC,CAiB1E;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,gBAAgB,CAAC,EAAE,+BAA+B,CAAC;IACnD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IACrC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,KAAK,CAAC,EAAE,oBAAoB,CAAC;IAC7B,UAAU,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CACtD;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,UAAU,CAAC;IAC3C,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACpC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACpE,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;CAChC;AAID,iBAAS,iBAAiB,CACxB,KAAK,EAAE,oBAAoB,EAC3B,IAAI,GAAE,mBAAwB;;;;;iBAhDZ,MAAM;cAAQ,MAAM,EAAE;cAAQ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;;;4BAuKvC,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,UAAU,UAAU,MAAM;EAK3F;AAED,MAAM,MAAM,qBAAqB,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,iBAAiB,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,aAAa,CAAC,GAAG;IAAE,cAAc,EAAE,aAAa,EAAE,CAAA;CAAE,CAAC;AAS/J,oGAAoG;AACpG,wBAAgB,eAAe,CAAC,KAAK,EAAE,oBAAoB,EAAE,IAAI,GAAE,mBAAwB,GAAG,qBAAqB,CAclH;AAED,MAAM,WAAW,mBAAoB,SAAQ,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC;IAC9E,MAAM,CAAC,EAAE,aAAa,GAAG,kBAAkB,CAAC;IAC5C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5E,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACtC;AAED,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,oBAAoB,EAAE,IAAI,GAAE,mBAAwB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAkDtI;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,EAC3C,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC,EACnC,GAAG,GAAE,MAAM,IAAuB,GACjC,qBAAqB,CAiCvB"}